Approved changes feed: RSS · Atom

cpe:2.3:a:pear:mail:1.1.14:*:*:*:*:*:*:*

part: a version: 1.1.14 update: *

VendorPear (202938b0-7fb8-5241-8587-372df9c20f96)
ProductMail (d9adc9a4-9631-5359-9423-1b5eb1fb655b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4111 vulnerable 2026-06-08 04:51:47.059483 Details available
Argument injection vulnerability in Mail/sendmail.php in the Mail package 1.1.14, 1.2.0b2, and possibly other versions for PEAR allows remote attackers to read and write arbitrary files via a crafted $recipients parameter, and possibly other parameters, a different vulnerability than CVE-2009-4023.
Published: 2009-11-28T18:00:00.000Z
Updated: 2024-08-07T06:54:09.376Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.